Getting Data In

TCP connection flowchart

MuS
SplunkTrust
SplunkTrust

Is there a TCP connection flowchart showing how the TCP connections are being established, controlled and closed between lightweight forwarder, heavy forwarder and indexer for 4.1.x?

Tags (1)
1 Solution

jrodman
Splunk Employee
Splunk Employee

Do you mean like a sequence diagram such as http://publib.boulder.ibm.com/infocenter/tpfhelp/current/topic/com.ibm.ztpf-ztpfdf.doc_put.cur/gtps5...

If so, the answer is no we do not.

I'm not sure the set of questions that you might have about forwarder sockets is really fully addressable via a sequence diagram. For an AutoLB situation there's a few behaviors that are interacting that I'm not sure how to visualize as a linear sequence. I suppose maybe i can do it as multiple vertical columns.

I think this is a good topic to document, and is not fully addressed currently. Maybe you can produce a sort of list of the kinds of things you would want to know. I have a list in my head already but I could miss some things.

You could log it as a 'support request', or mail me, or IM me and I'll make an internal doc item.

View solution in original post

jrodman
Splunk Employee
Splunk Employee

Do you mean like a sequence diagram such as http://publib.boulder.ibm.com/infocenter/tpfhelp/current/topic/com.ibm.ztpf-ztpfdf.doc_put.cur/gtps5...

If so, the answer is no we do not.

I'm not sure the set of questions that you might have about forwarder sockets is really fully addressable via a sequence diagram. For an AutoLB situation there's a few behaviors that are interacting that I'm not sure how to visualize as a linear sequence. I suppose maybe i can do it as multiple vertical columns.

I think this is a good topic to document, and is not fully addressed currently. Maybe you can produce a sort of list of the kinds of things you would want to know. I have a list in my head already but I could miss some things.

You could log it as a 'support request', or mail me, or IM me and I'll make an internal doc item.

MuS
SplunkTrust
SplunkTrust

just came to my mind, I still have to do this shameonme

0 Karma
Get Updates on the Splunk Community!

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...

Splunk MCP & Agentic AI: Machine Data Without Limits

Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization uses ...